RE: Electronic Voting Machines - WinVote by Adv anced Voting Solutions

["Fetch, Brandon" <BFetch () texpac com>]

Next question - is the traffic encrypted between the counting station and
the booth itself?  If it's not, I'm filing a paper vote in my community from
now on.

(Grand Prairie, TX BTW)

Brandon Fetch
817-871-4036
-- carpe ductum -- "Grab the tape"

-----Original Message-----
From: marchany () vt edu [mailto:marchany () vt edu]
Sent: Wednesday, August 18, 2004 4:41 PM
To: full-disclosure () lists netsys com
Cc: marchany () vtrand cc vt edu
Subject: [Full-disclosure] Electronic Voting Machines - WinVote by Advanced
Voting Solutions

Our county has approved the purchase of these machines for the upcoming
election. I looked them up on the www and found that the Windows-based
voting
machines use WEP to ensure the security of the wireless transmissions of the
machines to a central site.

Without even commenting on the "security" of WEP, it seems to me that a
massive DDOS attack against the voting machines could prevent vote tallies
from being counted in a timely manner.

Has there been any discussion of the security of this type of voting machine
architecture?

The machine is particular is WinVote by Advanced Voting Solutions
(http://clients.enfocom.com/avs/home.html`).

        -Randy Marchany

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


This message is intended only for the person(s) to which it is addressed 
and may contain privileged, confidential and/or insider information. 
If you have received this communication in error, please notify us 
immediately by replying to the message and deleting it from your computer. 
Any disclosure, copying, distribution, or the taking of any action concerning
the contents of this message and any attachment(s) by anyone other 
than the named recipient(s) is strictly prohibited.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html